| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: audit-devel | Distribution: openSUSE Tumbleweed |
| Version: 4.0.2 | Vendor: openSUSE |
| Release: 4.1 | Build date: Tue Jun 10 16:23:54 2025 |
| Group: Development/Libraries/C and C++ | Build host: reproducible |
| Size: 97485 | Source RPM: audit-4.0.2-4.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://people.redhat.com/sgrubb/audit/ | |
| Summary: Header files for libaudit | |
The audit-devel package contains the header files needed for developing applications that need to use the audit framework libraries.
LGPL-2.1-or-later
* Tue Jun 10 2025 Wolfgang Frisch <wolfgang.frisch@suse.com>
- Refresh systemd service patches:
- audit-allow-manual-stop.patch
- auditd.service-fix-plugin-termination.patch
- enable-stop-rules.patch
- fix-hardened-service.patch
- harden_auditd.service.patch
- Update to 4.0.2
- Fix musl C builds
- Many code cleanups (Yugend)
- Use atomic variables if available for signal related flags
- Dont rotate audit logs when auditd is in debug mode
- Fix a couple memory leaks on error paths
- Correct output when displaying rules with exe/path/dir (Attila Lakatos)
- Fix auparse lookup test to not use the system libaupaurse
- Improve auparse metrics
- Update auparse normalizer for recent syscalls
- Make status report uniform
- Update to 4.0.1
- Update TRUSTED_APP interpretation to look for known fields
- In auditd plugins, allow variable amount of arguments (Attila Lakatos)
- Fix augenrules to work correctly when kernel is in immutable mode
- Add ausearch_cur_event to auparse library (Attila Lakatos)
- Add audisp-filter plugin (Attila Lakatos)
- Improve sorting speed of aureport --summary reports
- auditd & audit-rules.service pick up paths automatically (Laurent Bigonville)
- Update auparse normalizer for new syscalls
* Fri Oct 04 2024 Enzo Matsumiya <ematsumiya@suse.com>
- Update audit.spec: add requirement for 'awk' package (bsc#1231236)
* Tue Sep 17 2024 Enzo Matsumiya <ematsumiya@suse.com>
- Update to 4.0
- Drop python2 support
- Drop auvirt and autrace programs
- Drop SysVinit support
- Require the use of the 5.0 or later kernel headers
- New README.md file
- Rewrite legacy service functions in terms of systemctl
- Consolidate and update end of event detection to a common function
- Split off rule loading from auditd.service into audit-rules.service
- Refactor libaudit.h to split out logging functions and record numbers
- Speed up aureport --summary reports
- Limit libaudit python bindings to logging functions
- Add a metrics function for auparse
- Change auditctl to use pidfd_send_signal for signaling auditd
- Adjust watches to optimize syscalls hooked when watch file access
- Drop nispom rules
- Add intepretations for fsconfig, fsopen, fsmount, & move_mount
- Many code fixups (cgzones)
- Update syscall and interpretation tables to the 6.8 kernel
(from v3.1.2)
- When processing a run level change, make auditd exit
- In auditd, fix return code when rules added in immutable mode
- In auparse, when files are given, also consider EUID for access
- Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
- Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
- Update all lookup tables for the 6.5 kernel
- Don't be as paranoid about auditctl -R file permissions
- In ausearch, correct subject/object search to be an and if both are given
- Adjust formats for 64 bit time_t
- Fix segfault in python bindings around the feed API
- Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
* Add fix-auparse-test.patch (downstream):
Upstream tests uses a static value (42) for 'gdm' uid/gid (based
on Fedora values, apparently). Replace these occurrences with
'unknown(123456)'
* Replace '--with-python' with '--with-python3' on %configure
* Add new headers 'audit_logging.h' and 'audit-records.h' for
audit-devel
* Mon Jul 03 2023 Paolo Stivanin <info@paolostivanin.com>
- Update to 3.1.1:
* Add user friendly keywords for signals to auditctl
* In ausearch, parse up URINGOP and DM_CTRL records
* Harden auparse to better handle corrupt logs
* Fix a CFLAGS propogation problem in the common directory
* Move the audispd af_unix plugin to a standalone program
* Thu May 04 2023 Frederic Crozat <fcrozat@suse.com>
- Add _multibuild to define additional spec files as additional
flavors.
Eliminates the need for source package links in OBS.
* Mon Mar 20 2023 Giuliano Belinassi <giuliano.belinassi@suse.com>
- Enable livepatching on main library on x86_64.
* Mon Feb 20 2023 Paolo Stivanin <info@paolostivanin.com>
- Update to 3.1:
* Disable ProtectControlGroups in auditd.service by default
* Fix rule checking for exclude filter
* Make audit_rule_syscallbyname_data work correctly outside of auditctl
* Add new record types
* Add io_uring support
* Add support for new FANOTIFY record fields
* Add keyword, this-hour, to ausearch/report start/end options
* Add Requires.private to audit.pc file
* Try to interpret OPENAT2 fields correctly
* Thu Dec 15 2022 Enzo Matsumiya <ematsumiya@suse.de>
- Enable build for ARM (32-bit)
- Update to version 3.0.9:
* In auditd, release the async flush lock on stop
* Don't allow auditd to log directly into /var/log when log_group is non-zero
* Cleanup krb5 memory leaks on error paths
* Update auditd.cron to use auditctl --signal
* In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
* In auparse, special case kernel module name interpretation
* If overflow_action is ignore, don't treat as an error
(3.0.8)
* Add gcc function attributes for access and allocation
* Add some more man pages (MIZUTA Takeshi)
* In auditd, change the reinitializing of the plugin queue
* Fix path normalization in auparse (Sergio Correia)
* In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
* In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
* Drop ProtectHome from auditd.service as it interferes with rules
(3.0.7)
* Add support for the OPENAT2 record type (Richard Guy Briggs)
* In auditd, close the logging file descriptor when logging is suspended
* Update the capabilities lookup table to match 5.16 kernel
* Improve interpretation of renamat & faccessat family of syscalls
* Update syscall table for the 5.16 kernel
* Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
* audit-allow-manual-stop.patch
* audit-ausearch-do-not-require-tclass.patch
* audit-no-gss.patch
* enable-stop-rules.patch
* fix-hardened-service.patch
* harden_auditd.service.patch
- Remove patches (fixed by version update):
* libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
* audisp-remote-fix-hang-with-disk_low_action-suspend-.patch
* Mon Apr 11 2022 Jan Engelhardt <jengelh@inai.de>
- Modernize specfile constructs.
* Sun Nov 07 2021 Callum Farmer <gmbr3@opensuse.org>
- Update to version 3.0.6:
* fixes a segfault on some SELINUX_ERR records
* makes IPX packet interpretation dependent on the ipx header
file existing
* adds b32/b64 support to ausyscall
* adds support for armv8l
* fixes auditctl list of syscalls on PPC
* auditd.service now restarts auditd under some conditions
/usr/include/audit-records.h /usr/include/audit_logging.h /usr/include/auparse-defs.h /usr/include/auparse.h /usr/include/libaudit.h /usr/lib64/libaudit.so /usr/lib64/libauparse.so /usr/lib64/pkgconfig/audit.pc /usr/lib64/pkgconfig/auparse.pc /usr/share/aclocal/audit.m4 /usr/share/doc/packages/audit-devel /usr/share/doc/packages/audit-devel/plugin /usr/share/doc/packages/audit-devel/plugin/Makefile /usr/share/doc/packages/audit-devel/plugin/audisp-example.c /usr/share/doc/packages/audit-devel/plugin/audisp-example.conf /usr/share/man/man3/audit_add_rule_data.3.gz /usr/share/man/man3/audit_add_watch.3.gz /usr/share/man/man3/audit_close.3.gz /usr/share/man/man3/audit_delete_rule_data.3.gz /usr/share/man/man3/audit_detect_machine.3.gz /usr/share/man/man3/audit_encode_nv_string.3.gz /usr/share/man/man3/audit_encode_value.3.gz /usr/share/man/man3/audit_flag_to_name.3.gz /usr/share/man/man3/audit_fstype_to_name.3.gz /usr/share/man/man3/audit_get_reply.3.gz /usr/share/man/man3/audit_get_session.3.gz /usr/share/man/man3/audit_getloginuid.3.gz /usr/share/man/man3/audit_is_enabled.3.gz /usr/share/man/man3/audit_log_acct_message.3.gz /usr/share/man/man3/audit_log_semanage_message.3.gz /usr/share/man/man3/audit_log_user_avc_message.3.gz /usr/share/man/man3/audit_log_user_comm_message.3.gz /usr/share/man/man3/audit_log_user_command.3.gz /usr/share/man/man3/audit_log_user_message.3.gz /usr/share/man/man3/audit_name_to_action.3.gz /usr/share/man/man3/audit_name_to_errno.3.gz /usr/share/man/man3/audit_name_to_flag.3.gz /usr/share/man/man3/audit_name_to_fstype.3.gz /usr/share/man/man3/audit_name_to_syscall.3.gz /usr/share/man/man3/audit_open.3.gz /usr/share/man/man3/audit_request_rules_list_data.3.gz /usr/share/man/man3/audit_request_signal_info.3.gz /usr/share/man/man3/audit_request_status.3.gz /usr/share/man/man3/audit_set_backlog_limit.3.gz /usr/share/man/man3/audit_set_backlog_wait_time.3.gz /usr/share/man/man3/audit_set_enabled.3.gz /usr/share/man/man3/audit_set_failure.3.gz /usr/share/man/man3/audit_set_pid.3.gz /usr/share/man/man3/audit_set_rate_limit.3.gz /usr/share/man/man3/audit_setloginuid.3.gz /usr/share/man/man3/audit_syscall_to_name.3.gz /usr/share/man/man3/audit_update_watch_perms.3.gz /usr/share/man/man3/audit_value_needs_encoding.3.gz /usr/share/man/man3/auparse_add_callback.3.gz /usr/share/man/man3/auparse_destroy.3.gz /usr/share/man/man3/auparse_feed.3.gz /usr/share/man/man3/auparse_feed_age_events.3.gz /usr/share/man/man3/auparse_feed_has_data.3.gz /usr/share/man/man3/auparse_find_field.3.gz /usr/share/man/man3/auparse_find_field_next.3.gz /usr/share/man/man3/auparse_first_field.3.gz /usr/share/man/man3/auparse_first_record.3.gz /usr/share/man/man3/auparse_flush_feed.3.gz /usr/share/man/man3/auparse_get_field_int.3.gz /usr/share/man/man3/auparse_get_field_name.3.gz /usr/share/man/man3/auparse_get_field_num.3.gz /usr/share/man/man3/auparse_get_field_str.3.gz /usr/share/man/man3/auparse_get_field_type.3.gz /usr/share/man/man3/auparse_get_filename.3.gz /usr/share/man/man3/auparse_get_line_number.3.gz /usr/share/man/man3/auparse_get_milli.3.gz /usr/share/man/man3/auparse_get_node.3.gz /usr/share/man/man3/auparse_get_num_fields.3.gz /usr/share/man/man3/auparse_get_num_records.3.gz /usr/share/man/man3/auparse_get_record_num.3.gz /usr/share/man/man3/auparse_get_record_text.3.gz /usr/share/man/man3/auparse_get_serial.3.gz /usr/share/man/man3/auparse_get_time.3.gz /usr/share/man/man3/auparse_get_timestamp.3.gz /usr/share/man/man3/auparse_get_type.3.gz /usr/share/man/man3/auparse_get_type_name.3.gz /usr/share/man/man3/auparse_goto_field_num.3.gz /usr/share/man/man3/auparse_goto_record_num.3.gz /usr/share/man/man3/auparse_init.3.gz /usr/share/man/man3/auparse_interpret_field.3.gz /usr/share/man/man3/auparse_metrics.3.gz /usr/share/man/man3/auparse_new_buffer.3.gz /usr/share/man/man3/auparse_next_event.3.gz /usr/share/man/man3/auparse_next_field.3.gz /usr/share/man/man3/auparse_next_record.3.gz /usr/share/man/man3/auparse_node_compare.3.gz /usr/share/man/man3/auparse_normalize.3.gz /usr/share/man/man3/auparse_normalize_functions.3.gz /usr/share/man/man3/auparse_reset.3.gz /usr/share/man/man3/auparse_set_eoe_timeout.3.gz /usr/share/man/man3/auparse_set_escape_mode.3.gz /usr/share/man/man3/auparse_timestamp_compare.3.gz /usr/share/man/man3/ausearch_add_expression.3.gz /usr/share/man/man3/ausearch_add_interpreted_item.3.gz /usr/share/man/man3/ausearch_add_item.3.gz /usr/share/man/man3/ausearch_add_regex.3.gz /usr/share/man/man3/ausearch_add_timestamp_item.3.gz /usr/share/man/man3/ausearch_add_timestamp_item_ex.3.gz /usr/share/man/man3/ausearch_clear.3.gz /usr/share/man/man3/ausearch_cur_event.3.gz /usr/share/man/man3/ausearch_next_event.3.gz /usr/share/man/man3/ausearch_set_stop.3.gz /usr/share/man/man3/get_auditfail_action.3.gz /usr/share/man/man3/set_aumessage_mode.3.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Oct 8 23:32:53 2025