A new update is available for Fedora Core - Fedora Core 4 Update: audit-1.0.12-2.fc4. Here the announcement:
Fedora Update Notification
FEDORA-2005-1064
2005-11-09
---------------------------------------------------------------------
Product : Fedora Core 4
Name : audit
Version : 1.0.12
Release : 2.fc4
Summary : User space tools for 2.6 kernel auditing.
Description :
The audit package contains the user space utilities for
storing and searching the audit records generate by
the audit subsystem in the Linux 2.6 kernel.
---------------------------------------------------------------------
Update Information:
This update privides a new utility for analizing audit logs,
adds email notification for some events, updates syscall
tables, and updates all documentation.
---------------------------------------------------------------------
* Tue Nov 8 2005 Steve Grubb <sgrubb@redhat.com> 1.0.12-2
- Fix sendmail error handler. Bug report from Dustin Kirkland of IBM.
* Mon Nov 7 2005 Steve Grubb <sgrubb@redhat.com> 1.0.12-1
- Add 2 more summary reports
- Add 2 more message types
* Sun Nov 6 2005 Steve Grubb <sgrubb@redhat.com> 1.0.11-1
- Fix memory leaks in aureport & ausearch
- Fix auditd reconfig to change mail accts, too
- Fix stray pointer in sorting of aureport
- Added new message type
- Add results to all DAEMON messages
* Fri Nov 4 2005 Steve Grubb <sgrubb@redhat.com> 1.0.10-1
- Add --failed/success flags to aureport to select specific events for reports
- Add --summary to get totals of reported objects
- Add ability to force log rotation by sending sigusr1 to auditd
- Add -i flag to auditctl to ignore errors when reading rules from a file
- Reformat aureports so date & time are always given
- Add cron script for log rotation to docs
* Wed Nov 2 2005 Steve Grubb <sgrubb@redhat.com> 1.0.9-1
- Updated message types that auditd recognizes
- Added a couple more message types
- Added new standard logging format function
- Update default config
- Make ausearch -m take a list of message types
* Thu Oct 27 2005 Steve Grubb <sgrubb@redhat.com> 1.0.8-1.fc4
- Update man pages
- Add email alert for admin_space_left in auditd
- Aureport cleanups
- Add anomaly & response to anomaly reports to aureport
- Summary report runs by default in aureport
- Updated syscall number tables
* Wed Oct 19 2005 Steve Grubb <sgrubb@redhat.com> 1.0.7-1.fc4
- Update reports
- Add new message types
- Bug fixes
* Mon Oct 10 2005 Steve Grubb <sgrubb@redhat.com> 1.0.6-1.fc4
- in aureport, add column labels to reports
- added watch report to aureport
- added interpreting mode to aureport
- added user space avc standard message to libaudit
- aureport & ausearch now use builtin log locations when bad config file
- add email alert to low disk space warning actions in auditd
* Tue Oct 4 2005 Steve Grubb <sgrubb@redhat.com> 1.0.5-1.fc4
- ausearch can now search on SE Linux contexts
- added aureport program to analyze logs
- aureport added report option for each log's start and end time
- increased random number selected for initial seq number in auditd
- add new user space defines to libaudit.h
- add add standard logging functions to libaudit
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
49cdf20c37b0ca8bf381c53ea973f702 SRPMS/audit-1.0.12-2.fc4.src.rpm
b295c59aa3fb45cc4724ee156f190968 ppc/audit-1.0.12-2.fc4.ppc.rpm
21e4ef5204aa1a919f5e36c8c16860fc ppc/audit-libs-1.0.12-2.fc4.ppc.rpm
85b410a3cac163d1dbe536a6de436025 ppc/audit-libs-devel-1.0.12-2.fc4.ppc.rpm
c2c9d5cb3bcec26db90996c46364d69b ppc/debug/audit-debuginfo-1.0.12-2.fc4.ppc.rpm
70fe05ef9daeb0ad0a9d6c91e97c15c2 ppc/audit-libs-1.0.12-2.fc4.ppc64.rpm
d6b6aee816b76604662503ec7fee3cd5 x86_64/audit-1.0.12-2.fc4.x86_64.rpm
0b37462ad484e36232e24a038b441808 x86_64/audit-libs-1.0.12-2.fc4.x86_64.rpm
b8911bad825b3ca8f5dc95ce42820b98 x86_64/audit-libs-devel-1.0.12-2.fc4.x86_64.rpm
32439f92bed4083b6d14312e80583a18 x86_64/debug/audit-debuginfo-1.0.12-2.fc4.x86_64.rpm
36422e339e68aad0e615096456d27076 x86_64/audit-libs-1.0.12-2.fc4.i386.rpm
1dacde75e783b42b5b630a195e6fa857 i386/audit-1.0.12-2.fc4.i386.rpm
36422e339e68aad0e615096456d27076 i386/audit-libs-1.0.12-2.fc4.i386.rpm
c3314c48704ad0e66034226787ea542b i386/audit-libs-devel-1.0.12-2.fc4.i386.rpm
c063556982c6827f05ac8701a9ce8b32 i386/debug/audit-debuginfo-1.0.12-2.fc4.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
