Back to bug 1296204

Who When What Removed Added
RHEL Program Management 2016-01-06 15:40:18 UTC Keywords FutureFeature
Paul Moore 2016-01-12 19:14:32 UTC Blocks 1135562
Paul Moore 2016-01-12 19:17:59 UTC Blocks 1135562
Ryan Sawhill 2016-01-12 22:11:05 UTC CC rsawhill
Steve Grubb 2016-01-13 21:41:14 UTC Status NEW ASSIGNED
Peter Vrabec 2016-01-29 13:56:06 UTC Blocks 1296594
Libor Miksik 2016-02-23 16:55:06 UTC CC lmiksik
Libor Miksik 2016-03-01 17:43:57 UTC Blocks 1313485
Josh Bressers 2016-03-13 18:55:32 UTC CC bressers
Docs Contact rkratky
Ondrej Moriš 2016-04-26 10:25:29 UTC CC omoris
QA Contact qe-baseos-security omoris
Mirek Jahoda 2016-06-13 12:14:50 UTC CC mjahoda
Docs Contact rkratky mjahoda
Steve Grubb 2016-06-22 20:16:37 UTC Status ASSIGNED MODIFIED
Fixed In Version audit-2.6-2.el7
errata-xmlrpc 2016-06-22 20:43:11 UTC Status MODIFIED ON_QA
Milos Malik 2016-06-27 07:39:11 UTC CC mmalik, sgrubb
Flags needinfo?(sgrubb)
Karel Srot 2016-06-27 08:11:13 UTC CC ksrot
Petr Lautrbach 2016-06-27 08:27:11 UTC CC plautrba
Steve Grubb 2016-06-27 11:49:05 UTC Flags needinfo?(sgrubb)
Steve Grubb 2016-08-10 15:29:19 UTC Fixed In Version audit-2.6-2.el7 audit-2.6.5-3.el7
Mirek Jahoda 2016-08-23 14:42:43 UTC Doc Text _audit_ rebased to version 2.6.5

The _audit_ packages contain the user space utilities for storing and searching the audit records which have been generated by the audit subsystem in the Linux kernel. The _audit_ packages have been upgraded to upstream version 2.6.5, which provides a number of enhancements and bug fixes over the previous version. Notable changes include the following:

* The *audit* daemon was restructured inside and given a new flush technique called `incremental_async`. This gives about 90x the performance of the old audit daemon.

* The *audit* system now has many more rules that can be composed into an *audit* policy. There are now 20 files with rules that support STIG, PCI DSS, and other capabilities such as auditing the occurrence of any 32-bit syscall, power abuse by administrators, or module loading.

* The `auditd.conf` configuration file and the "auditctl" command now support many new options.

* The *audit* system has a new log format called `enriched`, which resolves uid, gid, syscall, arch, and network addresses. This will aid in log analysis on a machine that differs from where the log was generated.
Mirek Jahoda 2016-08-23 14:51:38 UTC Doc Text _audit_ rebased to version 2.6.5

The _audit_ packages contain the user space utilities for storing and searching the audit records which have been generated by the audit subsystem in the Linux kernel. The _audit_ packages have been upgraded to upstream version 2.6.5, which provides a number of enhancements and bug fixes over the previous version. Notable changes include the following:

* The *audit* daemon was restructured inside and given a new flush technique called `incremental_async`. This gives about 90x the performance of the old audit daemon.

* The *audit* system now has many more rules that can be composed into an *audit* policy. There are now 20 files with rules that support STIG, PCI DSS, and other capabilities such as auditing the occurrence of any 32-bit syscall, power abuse by administrators, or module loading.

* The `auditd.conf` configuration file and the "auditctl" command now support many new options.

* The *audit* system has a new log format called `enriched`, which resolves uid, gid, syscall, arch, and network addresses. This will aid in log analysis on a machine that differs from where the log was generated.
_audit_ rebased to version 2.6.5

The _audit_ packages contain the user space utilities for storing and searching the audit records which have been generated by the audit subsystem in the Linux kernel. The _audit_ packages have been upgraded to upstream version 2.6.5, which provides a number of enhancements and bug fixes over the previous version. Notable changes include the following:

* The *audit* daemon was internally restructured and given a new flush technique called `incremental_async`. This gives about 90x the performance of the old audit daemon.

* The *audit* system now has many more rules that can be composed into an *audit* policy. There are now 20 files with rules that support STIG, PCI DSS, and other capabilities such as auditing the occurrence of any 32-bit syscall, power abuse by administrators, or module loading.

* The `auditd.conf` configuration file and the "auditctl" command now support many new options.

* The *audit* system has a new log format called `enriched`, which resolves uid, gid, syscall, arch, and network addresses. This will aid in log analysis on a machine that differs from where the log was generated.
Mirek Jahoda 2016-08-23 14:54:30 UTC Doc Text _audit_ rebased to version 2.6.5

The _audit_ packages contain the user space utilities for storing and searching the audit records which have been generated by the audit subsystem in the Linux kernel. The _audit_ packages have been upgraded to upstream version 2.6.5, which provides a number of enhancements and bug fixes over the previous version. Notable changes include the following:

* The *audit* daemon was internally restructured and given a new flush technique called `incremental_async`. This gives about 90x the performance of the old audit daemon.

* The *audit* system now has many more rules that can be composed into an *audit* policy. There are now 20 files with rules that support STIG, PCI DSS, and other capabilities such as auditing the occurrence of any 32-bit syscall, power abuse by administrators, or module loading.

* The `auditd.conf` configuration file and the "auditctl" command now support many new options.

* The *audit* system has a new log format called `enriched`, which resolves uid, gid, syscall, arch, and network addresses. This will aid in log analysis on a machine that differs from where the log was generated.
_audit_ rebased to version 2.6.5

The _audit_ packages contain the user space utilities for storing and searching the audit records which have been generated by the audit subsystem in the Linux kernel. The _audit_ packages have been upgraded to upstream version 2.6.5, which provides a number of enhancements and bug fixes over the previous version. Notable changes include the following:

* The *audit* daemon was internally restructured and given a new flush technique called `incremental_async`. This gives about 90 times the performance of the old audit daemon.

* The *audit* system now has many more rules that can be composed into an *audit* policy. There are now 20 files with rules that support STIG, PCI DSS, and other capabilities such as auditing the occurrence of any 32-bit syscall, power abuse by administrators, or module loading.

* The `auditd.conf` configuration file and the "auditctl" command now support many new options.

* The *audit* system has a new log format called `enriched`, which resolves uid, gid, syscall, arch, and network addresses. This will aid in log analysis on a machine that differs from where the log was generated.
Mirek Jahoda 2016-08-24 11:37:28 UTC Doc Text _audit_ rebased to version 2.6.5

The _audit_ packages contain the user space utilities for storing and searching the audit records which have been generated by the audit subsystem in the Linux kernel. The _audit_ packages have been upgraded to upstream version 2.6.5, which provides a number of enhancements and bug fixes over the previous version. Notable changes include the following:

* The *audit* daemon was internally restructured and given a new flush technique called `incremental_async`. This gives about 90 times the performance of the old audit daemon.

* The *audit* system now has many more rules that can be composed into an *audit* policy. There are now 20 files with rules that support STIG, PCI DSS, and other capabilities such as auditing the occurrence of any 32-bit syscall, power abuse by administrators, or module loading.

* The `auditd.conf` configuration file and the "auditctl" command now support many new options.

* The *audit* system has a new log format called `enriched`, which resolves uid, gid, syscall, arch, and network addresses. This will aid in log analysis on a machine that differs from where the log was generated.
_audit_ rebased to version 2.6.5

The _audit_ packages contain the user space utilities for storing and searching the audit records which have been generated by the audit subsystem in the Linux kernel. The _audit_ packages have been upgraded to upstream version 2.6.5, which provides a number of enhancements and bug fixes over the previous version. Notable changes include the following:

* The *audit* daemon now includes a new flush technique called `incremental_async`, which improves its performance approximately 90 times.

* The *audit* system now has many more rules that can be composed into an *audit* policy. Some of these new rules include support for the Security Technical Implementation Guide (STIG), PCI Data Security Standard, and other capabilities such as auditing the occurrence of 32-bit syscalls, significant power usage, or module loading.

* The `auditd.conf` configuration file and the "auditctl" command now support many new options.

* The *audit* system now supports a new log format called `enriched`, which resolves UID, GID, syscall, architecture, and network addresses. This will aid in log analysis on a machine that differs from where the log was generated.
Ondrej Moriš 2016-09-14 10:47:55 UTC Status ON_QA VERIFIED
errata-xmlrpc 2016-11-02 13:00:40 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-11-04 06:13:10 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-11-04 02:13:10 UTC
Samuel Verschelde 2018-11-29 09:50:52 UTC CC stormi

Back to bug 1296204