- Issued:
- 2008-07-24
- Updated:
- 2008-07-24
RHBA-2008:0731 - Bug Fix Advisory
Synopsis
audit bug fix update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated audit packages that resolve several issues are now available.
Description
The audit package contains the user space utilities for storing and
searching the audit records generate by the audit subsystem in the Linux
2.6 kernel.
These updated audit packages provide fixes for the following bugs:
- a problem in which log files filled up quickly with error messages due to
auditd failing to properly use the num_logs configuration setting in the
keep_logs option from the /etc/auditd.conf configuration file.
- ausearch sometimes segfaulted when invoked with the '-k' option, and the
'-k' option wasn't specified in all watches in the audit.rules
configuration file.
- when auditd suspended logging due to a full partition and then free space
became available, auditd would not start logging again, not even after
being reloaded.
- auditd was updated to try to resume logging after receiving a SIGUSR2 signal.
- updated time options for ausearch and aureport, which now support the
following new keywords: recent, this-week, week-ago, this-month, and this-year.
All users of audit are advised to upgrade to these updated packages, which
resolve these issues.
Solution
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188
Affected Products
- Red Hat Enterprise Linux Server 4 x86_64
- Red Hat Enterprise Linux Server 4 ia64
- Red Hat Enterprise Linux Server 4 i386
- Red Hat Enterprise Linux Workstation 4 x86_64
- Red Hat Enterprise Linux Workstation 4 ia64
- Red Hat Enterprise Linux Workstation 4 i386
- Red Hat Enterprise Linux Desktop 4 x86_64
- Red Hat Enterprise Linux Desktop 4 i386
- Red Hat Enterprise Linux for IBM z Systems 4 s390x
- Red Hat Enterprise Linux for IBM z Systems 4 s390
- Red Hat Enterprise Linux for Power, big endian 4 ppc
Fixes
- BZ - 251639 - Auditd does not recover from logging_suspended state
- BZ - 325561 - num_logs option is needed for keep_logs to work in /etc/auditd.conf
- BZ - 402941 - ausearch segfaults if you're using -k and a logged watch doesn't have a filter key
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 4
SRPM | |
---|---|
audit-1.0.16-3.el4.src.rpm | SHA-256: 623ee48f9158d4dde38c7e7433521e71207684e2277837df13e696d776bad9b4 |
x86_64 | |
audit-1.0.16-3.el4.x86_64.rpm | SHA-256: eccd29232b8a7a8dc59a77d9b927a72305cc194b773df24a3403fd445b583eff |
audit-1.0.16-3.el4.x86_64.rpm | SHA-256: eccd29232b8a7a8dc59a77d9b927a72305cc194b773df24a3403fd445b583eff |
audit-libs-1.0.16-3.el4.i386.rpm | SHA-256: 411e5b28e7b9d84d265e8a3fa41ebf988a631a597d5bb92ad8786bd9abd18099 |
audit-libs-1.0.16-3.el4.i386.rpm | SHA-256: 411e5b28e7b9d84d265e8a3fa41ebf988a631a597d5bb92ad8786bd9abd18099 |
audit-libs-1.0.16-3.el4.x86_64.rpm | SHA-256: 17f7a6da4b5d0eae49b70ac5fa25b15a3ac47c9738d6e915552dd7cded51d353 |
audit-libs-1.0.16-3.el4.x86_64.rpm | SHA-256: 17f7a6da4b5d0eae49b70ac5fa25b15a3ac47c9738d6e915552dd7cded51d353 |
audit-libs-devel-1.0.16-3.el4.x86_64.rpm | SHA-256: b0dcf602b2cb0e5474f6ab75a61e36ba7961e58043de8e9495ae15de77ba0af6 |
audit-libs-devel-1.0.16-3.el4.x86_64.rpm | SHA-256: b0dcf602b2cb0e5474f6ab75a61e36ba7961e58043de8e9495ae15de77ba0af6 |
ia64 | |
audit-1.0.16-3.el4.ia64.rpm | SHA-256: 28e523696da311fd98361d0606231aa3d4b970ccaaf767c1869f3cc3fc8df108 |
audit-1.0.16-3.el4.ia64.rpm | SHA-256: 28e523696da311fd98361d0606231aa3d4b970ccaaf767c1869f3cc3fc8df108 |
audit-libs-1.0.16-3.el4.i386.rpm | SHA-256: 411e5b28e7b9d84d265e8a3fa41ebf988a631a597d5bb92ad8786bd9abd18099 |
audit-libs-1.0.16-3.el4.i386.rpm | SHA-256: 411e5b28e7b9d84d265e8a3fa41ebf988a631a597d5bb92ad8786bd9abd18099 |
audit-libs-1.0.16-3.el4.ia64.rpm | SHA-256: 72ad8aa18e7e2589b4ef8460e280974870edb142323ee125ded7b1a5bc20965c |
audit-libs-1.0.16-3.el4.ia64.rpm | SHA-256: 72ad8aa18e7e2589b4ef8460e280974870edb142323ee125ded7b1a5bc20965c |
audit-libs-devel-1.0.16-3.el4.ia64.rpm | SHA-256: a6e2f72f0e857cab69f2231cbb7e471042a53be1d52cf030b0a59adc0c25f0b4 |
audit-libs-devel-1.0.16-3.el4.ia64.rpm | SHA-256: a6e2f72f0e857cab69f2231cbb7e471042a53be1d52cf030b0a59adc0c25f0b4 |
i386 | |
audit-1.0.16-3.el4.i386.rpm | SHA-256: 27e7ba46160abaa0948800162c7d1c7e75de082239bb74e3aeb36fcb60a8be01 |
audit-1.0.16-3.el4.i386.rpm | SHA-256: 27e7ba46160abaa0948800162c7d1c7e75de082239bb74e3aeb36fcb60a8be01 |
audit-libs-1.0.16-3.el4.i386.rpm | SHA-256: 411e5b28e7b9d84d265e8a3fa41ebf988a631a597d5bb92ad8786bd9abd18099 |
audit-libs-1.0.16-3.el4.i386.rpm | SHA-256: 411e5b28e7b9d84d265e8a3fa41ebf988a631a597d5bb92ad8786bd9abd18099 |
audit-libs-devel-1.0.16-3.el4.i386.rpm | SHA-256: 5764bbdee919aa5bf7c6391f052151accbf3bc3f49dfad9cfa546edc3214d3bf |
audit-libs-devel-1.0.16-3.el4.i386.rpm | SHA-256: 5764bbdee919aa5bf7c6391f052151accbf3bc3f49dfad9cfa546edc3214d3bf |
Red Hat Enterprise Linux Workstation 4
SRPM | |
---|---|
audit-1.0.16-3.el4.src.rpm | SHA-256: 623ee48f9158d4dde38c7e7433521e71207684e2277837df13e696d776bad9b4 |
x86_64 | |
audit-1.0.16-3.el4.x86_64.rpm | SHA-256: eccd29232b8a7a8dc59a77d9b927a72305cc194b773df24a3403fd445b583eff |
audit-libs-1.0.16-3.el4.i386.rpm | SHA-256: 411e5b28e7b9d84d265e8a3fa41ebf988a631a597d5bb92ad8786bd9abd18099 |
audit-libs-1.0.16-3.el4.x86_64.rpm | SHA-256: 17f7a6da4b5d0eae49b70ac5fa25b15a3ac47c9738d6e915552dd7cded51d353 |
audit-libs-devel-1.0.16-3.el4.x86_64.rpm | SHA-256: b0dcf602b2cb0e5474f6ab75a61e36ba7961e58043de8e9495ae15de77ba0af6 |
ia64 | |
audit-1.0.16-3.el4.ia64.rpm | SHA-256: 28e523696da311fd98361d0606231aa3d4b970ccaaf767c1869f3cc3fc8df108 |
audit-libs-1.0.16-3.el4.i386.rpm | SHA-256: 411e5b28e7b9d84d265e8a3fa41ebf988a631a597d5bb92ad8786bd9abd18099 |
audit-libs-1.0.16-3.el4.ia64.rpm | SHA-256: 72ad8aa18e7e2589b4ef8460e280974870edb142323ee125ded7b1a5bc20965c |
audit-libs-devel-1.0.16-3.el4.ia64.rpm | SHA-256: a6e2f72f0e857cab69f2231cbb7e471042a53be1d52cf030b0a59adc0c25f0b4 |
i386 | |
audit-1.0.16-3.el4.i386.rpm | SHA-256: 27e7ba46160abaa0948800162c7d1c7e75de082239bb74e3aeb36fcb60a8be01 |
audit-libs-1.0.16-3.el4.i386.rpm | SHA-256: 411e5b28e7b9d84d265e8a3fa41ebf988a631a597d5bb92ad8786bd9abd18099 |
audit-libs-devel-1.0.16-3.el4.i386.rpm | SHA-256: 5764bbdee919aa5bf7c6391f052151accbf3bc3f49dfad9cfa546edc3214d3bf |
Red Hat Enterprise Linux Desktop 4
SRPM | |
---|---|
audit-1.0.16-3.el4.src.rpm | SHA-256: 623ee48f9158d4dde38c7e7433521e71207684e2277837df13e696d776bad9b4 |
x86_64 | |
audit-1.0.16-3.el4.x86_64.rpm | SHA-256: eccd29232b8a7a8dc59a77d9b927a72305cc194b773df24a3403fd445b583eff |
audit-libs-1.0.16-3.el4.i386.rpm | SHA-256: 411e5b28e7b9d84d265e8a3fa41ebf988a631a597d5bb92ad8786bd9abd18099 |
audit-libs-1.0.16-3.el4.x86_64.rpm | SHA-256: 17f7a6da4b5d0eae49b70ac5fa25b15a3ac47c9738d6e915552dd7cded51d353 |
audit-libs-devel-1.0.16-3.el4.x86_64.rpm | SHA-256: b0dcf602b2cb0e5474f6ab75a61e36ba7961e58043de8e9495ae15de77ba0af6 |
i386 | |
audit-1.0.16-3.el4.i386.rpm | SHA-256: 27e7ba46160abaa0948800162c7d1c7e75de082239bb74e3aeb36fcb60a8be01 |
audit-libs-1.0.16-3.el4.i386.rpm | SHA-256: 411e5b28e7b9d84d265e8a3fa41ebf988a631a597d5bb92ad8786bd9abd18099 |
audit-libs-devel-1.0.16-3.el4.i386.rpm | SHA-256: 5764bbdee919aa5bf7c6391f052151accbf3bc3f49dfad9cfa546edc3214d3bf |
Red Hat Enterprise Linux for IBM z Systems 4
SRPM | |
---|---|
audit-1.0.16-3.el4.src.rpm | SHA-256: 623ee48f9158d4dde38c7e7433521e71207684e2277837df13e696d776bad9b4 |
s390x | |
audit-1.0.16-3.el4.s390x.rpm | SHA-256: bda4874d752f00a623a19734a3c7e0b422850fbea91f7bacf899e876d7134331 |
audit-libs-1.0.16-3.el4.s390.rpm | SHA-256: 0896641ab8dff84ad6817d6ad28b1f8f9ba80aeb586a1b5f80812b1af2c5c427 |
audit-libs-1.0.16-3.el4.s390x.rpm | SHA-256: 1ac077852f1406a7e1c6190ca569ef19d681143c3925eb2184f367868c5b5b12 |
audit-libs-devel-1.0.16-3.el4.s390x.rpm | SHA-256: 1e7ff6b9499c21911fa510c929b9c1c987a25f8422a8f0d595a638608d21aa80 |
s390 | |
audit-1.0.16-3.el4.s390.rpm | SHA-256: a5043c116d2926ecb2f8c610d3060a46f687d49e80fa6f6322ceadd3c62200d2 |
audit-libs-1.0.16-3.el4.s390.rpm | SHA-256: 0896641ab8dff84ad6817d6ad28b1f8f9ba80aeb586a1b5f80812b1af2c5c427 |
audit-libs-devel-1.0.16-3.el4.s390.rpm | SHA-256: 956f6d342ca02abbb1cba73cc0e1a12ba370963a22838d6d549f35716a5bde18 |
Red Hat Enterprise Linux for Power, big endian 4
SRPM | |
---|---|
audit-1.0.16-3.el4.src.rpm | SHA-256: 623ee48f9158d4dde38c7e7433521e71207684e2277837df13e696d776bad9b4 |
ppc | |
audit-1.0.16-3.el4.ppc.rpm | SHA-256: f248a278306e228f4397b318e8bba476e698ce7d63111f13d683feabeb7159c4 |
audit-libs-1.0.16-3.el4.ppc.rpm | SHA-256: 1deb4d4662b73d1df7225ecd44a42dc7aa42315a7247a931680f1fb32e9126ad |
audit-libs-1.0.16-3.el4.ppc64.rpm | SHA-256: 96ffbc5d834d119a57c6e5ae501821764daeddd52cd22eb8c2ff564d4867df59 |
audit-libs-devel-1.0.16-3.el4.ppc.rpm | SHA-256: 5b76f9b1977366fd82729999e2c621cade9b8971f597bd823857aeb642b04677 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.