audit bug fix and enhancement update

Updated audit packages that fix various bugs and add several enhancements are
now available for Red Hat Enterprise Linux 6.

The audit packages contain the user space utilities for storing and searching
the audit records which have been generated by the audit subsystem in the Linux
2.6 kernel.

The audit package has been upgraded to upstream version 2.1.3, which provides a
number of bug fixes and enhancements over the previous version. (BZ#731723)

This update fixes the following bugs:

* Previously, the audit daemon was logging messages even when configured to
ignore "disk full" and "disk error" actions. With this update, audit now does
nothing if it is set to ignore these actions, and no messages are logged in the
described scenario. (BZ#715279)

* Previously, the Audit remote logging client received a "disk error" event
instead of "disk full" event from a server when the server's disk space ran out.
This bug has been fixed and the logging client now returns the correct event in
the described scenario. (BZ#715315)

* Prior to this update, the audit system was identifying the accept4() system
call as the now deprecated paccept() system call. Now, the code has been fixed
and audit uses the correct identifier for the accept4() system call. (BZ#748124)

* Previously, the "auditctl -l" command returned 0 even if it failed because of
dropped capabilities. This bug has been fixed and a non-zero value is now
returned if the operation is not permitted. (BZ#709345)

* When Kerberos support was disabled, some configuration options in the
audisp-remote.conf file related to Kerberos 5 generated warning messages about
GSSAPI support during boot. With this update, the options are now commented out
in the described scenario and the messages are no longer returned. (BZ#728475)

* On i386 and IBM System z architectures, the "autrace -r /bin/ls" command
returned error messages even though all relevant rules were added correctly.
This bug has been fixed and no error messages about sending add rule data
requests are now returned in the described scenario. (BZ#700005)

All audit users are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements.

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

700005 - On s390x and i386 "autrace -r /bin/ls" produces errors
709345 - /sbin/auditctl -l returns 0 even if it fails due to dropped capabilities
715315 - Audit remote client gets disk_error event from an auditd server instead of disk_full
728475 - audisp-remote.conf - remove krb5 related options which generate syslog messages
731723 - Audit system updates for 6.2